Hackers target WordPress sites in miniOrange auth bypass attacks
Brief
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2. 0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. [... ]